$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/f929814b-db35-3faa-ad1d-9adfda0f0da7.roa File: f929814b-db35-3faa-ad1d-9adfda0f0da7.roa (raw, json) Hash identifier: yaJgUkSCsF7bpIdnG7t8AN7EBLhArZ2pEA9lzPTTMA0= Subject key identifier: D4:73:89:9D:E7:98:BA:C3:1E:D2:60:82:F5:A2:D6:C3:B4:70:AF:11 Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Certificate serial: 010D0C9F4328584F8F011EF79752BCBF6EAADE80 Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/f929814b-db35-3faa-ad1d-9adfda0f0da7.roa Signing time: Mon 19 Oct 2026 22:58:18 +0000 ROA not before: Mon 19 Oct 2026 22:58:18 +0000 ROA not after: Sun 17 Jan 2027 23:58:18 +0000 asID: 31898 IP address blocks: 23.154.28.0/24 maxlen: 24 206.126.108.0/24 maxlen: 24 2602:f440::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:01:1e:f7:97:52:bc:bf:6e:aa:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Validity Not Before: Oct 19 22:58:18 2026 GMT Not After : Jan 17 23:58:18 2027 GMT Subject: CN=a054aa28-cd69-4661-9133-1aa41d7b98f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:e0:5f:49:26:a1:4a:01:67:61:e0:05:d9: e3:ad:20:87:13:0c:79:ed:33:13:44:4a:4a:9e:5a: 9a:58:56:c7:b7:4b:0d:39:b9:bb:bc:c6:a4:78:4b: c9:42:f4:4c:19:b8:c6:e5:db:62:9a:da:b8:fc:47: 0f:23:f5:36:15:4a:cb:c6:f2:7b:53:0a:27:d9:e8: 93:b1:c2:e1:44:af:0a:3c:5e:9a:52:6b:d2:fd:42: 79:13:4f:94:c9:9e:67:3d:f3:ce:4d:1d:f8:f3:a1: 99:99:bf:42:0e:1f:81:cf:b4:a3:53:34:23:3a:1b: ba:9f:7f:a7:47:a3:b9:97:27:7c:4d:52:ec:70:8a: ca:ba:0b:5d:05:d9:39:60:8d:24:42:6a:29:29:e8: 75:56:52:82:e4:41:4f:c0:17:c1:31:30:38:9c:b0: 0e:dc:99:f1:27:de:b6:9f:a1:d0:13:1a:1e:2f:c0: 2f:50:21:ed:f6:ac:1f:5d:bd:50:f0:c9:19:f4:c1: 72:b1:a0:87:b2:fa:69:c9:5f:85:42:e9:3f:89:a3: 7b:da:8d:a4:d9:62:f6:81:1a:83:33:bb:e6:bc:51: 43:3e:69:99:74:1d:c8:99:10:c0:08:06:db:ba:d0: cf:9b:0b:94:3b:fd:19:e9:f6:d5:2c:69:b5:8b:81: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:89:9D:E7:98:BA:C3:1E:D2:60:82:F5:A2:D6:C3:B4:70:AF:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/f929814b-db35-3faa-ad1d-9adfda0f0da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl X509v3 Authority Key Identifier: keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer sbgp-ipAddrBlock: critical IPv4: 23.154.28.0/24 206.126.108.0/24 IPv6: 2602:f440::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:94:45:bf:df:3e:2c:12:b0:cd:61:70:b2:93:bf:bf:9b:0b: ad:38:5f:8f:54:a6:55:87:18:2e:5a:7a:1d:c7:e9:9a:2f:89: f8:8d:80:76:83:c8:83:c5:60:66:b4:6e:78:6b:ce:44:21:2a: 27:5c:a3:f0:d7:2d:b4:52:b5:52:01:1c:d5:09:ea:00:da:2d: 6e:8d:d1:75:93:91:77:4e:31:79:a1:7f:c4:b0:3c:ad:f1:f4: cc:88:b7:94:f7:53:f9:0d:2c:49:28:45:26:8c:13:96:87:1c: 92:87:a5:13:19:fc:fe:c8:68:b8:cc:f2:3e:8f:5b:8f:6c:07: 95:1f:85:8b:d1:a6:af:f2:c4:48:fe:e2:60:6d:6f:ac:ad:72: 13:5c:4d:89:76:a9:50:f9:aa:87:aa:79:c3:91:7f:5a:25:97: fe:5e:2c:b2:64:51:fb:3a:f0:10:b6:83:a6:6c:04:9d:ae:bc: f2:e3:3f:43:ca:a5:4b:fc:87:63:ba:96:fa:b1:d7:96:31:26: 2d:dc:d7:a1:75:63:5c:7e:4f:4f:24:39:c3:28:c8:28:73:38: fa:13:8c:8c:57:f1:73:2e:34:c1:70:ee:6a:ec:96:5e:36:98: e4:8f:82:5b:e5:2e:bf:25:24:8b:95:cc:1c:57:3c:c0:54:ce: 07:bf:a4:a8 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE+PAR73l1K8v26q3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0M2E4NjgtM2QxNC00NDBmLWE5NWEtNTQyOGMyMzJj NWQwMB4XDTI2MTAxOTIyNTgxOFoXDTI3MDExNzIzNTgxOFowLzEtMCsGA1UEAxMk YTA1NGFhMjgtY2Q2OS00NjYxLTkxMzMtMWFhNDFkN2I5OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhbgX0kmoUoBZ2HgBdnjrSCHEwx57TMTREpK nlqaWFbHt0sNObm7vMakeEvJQvRMGbjG5dtimtq4/EcPI/U2FUrLxvJ7Uwon2eiT scLhRK8KPF6aUmvS/UJ5E0+UyZ5nPfPOTR3486GZmb9CDh+Bz7SjUzQjOhu6n3+n R6O5lyd8TVLscIrKugtdBdk5YI0kQmopKeh1VlKC5EFPwBfBMTA4nLAO3JnxJ962 n6HQExoeL8AvUCHt9qwfXb1Q8MkZ9MFysaCHsvppyV+FQuk/iaN72o2k2WL2gRqD M7vmvFFDPmmZdB3ImRDACAbbutDPmwuUO/0Z6fbVLGm1i4FRtQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNRziZ3nmLrDHtJggvWi1sO0cK8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQz YTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4YzIzMmM1ZDAvZjkyOTgxNGItZGIzNS0z ZmFhLWFkMWQtOWFkZmRhMGYwZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmE0M2E4NjgtM2QxNC00NDBmLWE5 NWEtNTQyOGMyMzJjNWQwLzJhNDNhODY4LTNkMTQtNDQwZi1hOTVhLTU0MjhjMjMy YzVkMC5jcmwwHwYDVR0jBBgwFoAUiumx2z4c45AwqsnkROKvu5fxSzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQzYTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4 YzIzMmM1ZDAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5ocAwQA zn5sMA4EAgACMAgDBgAmAvRAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHlEW/3z4sErDNYXCyk7+/mwut OF+PVKZVhxguWnodx+maL4n4jYB2g8iDxWBmtG54a85EISonXKPw1y20UrVSARzV CeoA2i1ujdF1k5F3TjF5oX/EsDyt8fTMiLeU91P5DSxJKEUmjBOWhxySh6UTGfz+ yGi4zPI+j1uPbAeVH4WL0aav8sRI/uJgbW+srXITXE2JdqlQ+aqHqnnDkX9aJZf+ XiyyZFH7OvAQtoOmbASdrrzy4z9DyqVL/Idjupb6sdeWMSYt3NehdWNcfk9PJDnD KMgoczj6E4yMV/FzLjTBcO5q7JZeNpjkj4Jb5S6/JSSLlcwcVzzAVM4Hv6So -----END CERTIFICATE-----Generated at Sun Oct 25 14:20:54 2026 by rpki-client